CVE-2015-1456 — Sensitive Information Exposure in Fortinet Fortiauthenticator

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.0MEDIUMNVD
EPSS
0.3%
top 49.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Fortinet Fortiauthenticator
Timeline
PublishedFeb 3
Latest updateMay 17

Description

Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administrators to obtain sensitive information by reading the log at debug/startup/.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-ffvf-hcvh-5ccx: Fortinet FortiAuthenticator 3↗2022-05-17
▶
CVEList
CVE-2015-1456: Fortinet FortiAuthenticator 3↗2015-02-03
▶
CVE-2015-1456 — Sensitive Information Exposure | cvebase